Denial of Service Vulnerability in SAP NetWeaver AS ABAP
CVE-2020-6240

5.3MEDIUM

Key Information:

Vendor

SAP
Status
SAP Netweaver As Abap (web Dynpro Abap) (SAP Ui)
SAP Netweaver As Abap (web Dynpro Abap) (SAP Basis)
Vendor
CVE Published:
12 May 2020

What is CVE-2020-6240?

The Denial of Service vulnerability in SAP NetWeaver AS ABAP affects specific versions, allowing unauthenticated attackers to disrupt legitimate user access by crashing or overwhelming the service. This can significantly impact service availability and operational efficiency, making it crucial for organizations to address this issue promptly.

Affected Version(s)

SAP NetWeaver AS ABAP (Web Dynpro ABAP) (SAP_BASIS) < 700 < 700

SAP NetWeaver AS ABAP (Web Dynpro ABAP) (SAP_BASIS) < 710 < 710

SAP NetWeaver AS ABAP (Web Dynpro ABAP) (SAP_BASIS) < 730 < 730

References

https://launchpad.support.sap.com/#/notes/2856923
x_refsource_MISC
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageI...
x_refsource_MISC

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.